General

  • Target

    NEAS.2e23cf12f93209fde5e142af61c29af0.exe

  • Size

    95KB

  • MD5

    2e23cf12f93209fde5e142af61c29af0

  • SHA1

    6ffd68b545084906e6d012dd08a815a31f34db9d

  • SHA256

    2b0fd317cfd7646c7c195d0d511104477e0de0c1ead7b984e988c7bc7b3dfe34

  • SHA512

    637f0e65005a8b7821dfb9d6725d5ed3276001912e192883d1b53cadd977ca7fcbedd5d49070f6524b6d8f576b164714931434240695c2bb252aaea1d23f04dd

  • SSDEEP

    1536:sM//Z+eQMGW5aFY3Y61KVgWLTCC8d01XS44qc1GFpaS0QZZMCg8RvZmA8B5epV6E:rnZJzV5rzfP4r3QQZZ5g85ZmSc6B

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.2e23cf12f93209fde5e142af61c29af0.exe
    .dll windows:4 windows x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86


    Headers

    Sections